No documented FoD API for downloading mobile scan results

[rsenden]

The utility is currently unable to synchronize mobile scan results from FoD to SSC, as the FoD Swagger documentation doesn't list any endpoint for downloading mobile scan results.

In order to be able to synchronize mobile scan results, the FoD (dev) team will need to provide information about the appropriate endpoint to use.

[rsenden]

API endpoint is actually available (/api/v3/releases/{releaseId}/fpr?scanType=Mobile), but is currently broken. This will be fixed in an upcoming FoD release). Once fixed, following is an (incomplete) list of changes to be made in FortifySyncFoDToSSC:

• Add 'Mobile' as default enabled type to ConfigJobLinkReleasesSSC#enabledFoDScanTypes
• Add 'Mobile' as option to SSCSyncAttr#INCLUDE_FOD_SCAN_TYPES
• Update sample configuration files to also list 'Mobile' as supported/enabled by default scan type
• Update documentation, informing existing users to update:
  • Their 'FoD Sync - Include Scan Types' attribute to add 'Mobile' as a supported scan type
  • Update existing application versions to add 'Mobile' to the list of included scan types
  • Potentially provide migration functionality to automate these changes